XSMAsDefault TODO List: Difference between revisions

From Xen
Jump to navigationJump to search
Line 13: Line 13:


[[Category:Security]]
[[Category:Security]]

* Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later?

Revision as of 18:29, 25 April 2016

What do we want to achieve

XSM with default policy will have:

  • Same functionality exposed to guests without regressions
  • Have at minimum the same security as we have without XSM enabled.
  • Have set of policies for device driver domains vs control domains.

Known Issues

  • Cannot re-apply a new policy after guests have been running.

TODO List

  • Can we make policies modularized? A core (perhaps built-in?) with amendments loaded later?